916ca06c3ebcf10eabcd9ead04b623fa80187a531f406bc2b7b5741b9fbbc4da | Triage

Sharing

Copy URL Twitter E-mail

General

Target

916ca06c3ebcf10eabcd9ead04b623fa80187a531f406bc2b7b5741b9fbbc4da
Size

22KB
MD5

5e44902a16db4b6db5ede423f791360b
SHA1

892499fe4b194887874c3f3c482824d75dbf0291
SHA256

916ca06c3ebcf10eabcd9ead04b623fa80187a531f406bc2b7b5741b9fbbc4da
SHA512

981efcb83d0a6f2be8141c476d91c376e012ca7b07204aa4ea78e7fbcb6012d5995f30b84da11af0c788df7b99985c98516cefa13f07bc94b547fcd537611c77
SSDEEP

384:jIz4afkAFrSzHKI8OWD6xV6lZteQPergGoINJeZrSbrMW09gtiBm9+KSZW3xY//b:jIUpzzZW+0ZvPPRIKZrwQWiLzK33xY3b

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
916ca06c3ebcf10eabcd9ead04b623fa80187a531f406bc2b7b5741b9fbbc4da

Files

916ca06c3ebcf10eabcd9ead04b623fa80187a531f406bc2b7b5741b9fbbc4da
.exe windows:4 windows x86 arch:x86

0c144496adf6d6951a8195019d714846

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
DeleteFileA
ExitProcess
GetModuleFileNameA
GetProcessHeap
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile

Sections

.text
Size: 1024B - Virtual size: 768B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 452B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE